Moved default definitions, CLEAN cis/core/default AFTER all hosts adapted

updateRepositories.sh

@@ -73,8 +73,27 @@ function update_repositories() {
     return 1
 }
 
-# sanitizes all parameters
-update_repositories "$(echo ${1} | sed -E 's|[^a-zA-Z0-9/:@._-]*||g')" \
-    && exit 0
+function isValid() {
+    # printf '%s'
+    #  - always treats the contents of ${1} as pure plain text.
+    # grep -qE: checks RegExp, but quiet
+    printf '%s' "${1}" | grep -qE "${2:?"isValid(): Missing REGEXP"}"
+}
+
+function isValidOptional() {
+    [ -z "${1}" ] || isValid "${1}" "${2}"
+}
+
+
+
+# Parameter 1: Only one of these values are allowed (--core, --definitions, --repair, --scripts, --states, --test)
+if isValidOptional "${1}" '^(--core|--definitions|--repair|--scripts|--states|--test)$'
+then
+    update_repositories "${1}" \
+        && exit 0
+else
+    echo "Failure: At least one parameter is invalid" >&2
+    exit 1
+fi
 
 exit 1